Lucene search

[email protected]NVD:CVE-2007-3771

HistoryJul 15, 2007 - 10:30 p.m.

CVE-2007-3771

2007-07-1522:30:00

[email protected]

web.nvd.nist.gov

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service (service crash) via a long (1) To, (2) From, or (3) Subject header in an outbound SMTP e-mail message. NOTE: the original vendor advisory referenced CVE-2006-3456, but this was an error.

Affected configurations

Nvd

Node

symantecclient_securityMatch2.0

symantecclient_securityMatch3.0

symantecclient_securityMatch3.0.1.1000

symantecclient_securityMatch3.0.1.1007

symantecclient_securityMatch3.0.1.1009

symantecclient_securityMatch3.0.2

symantecclient_securityMatch3.0.2.2000

symantecclient_securityMatch3.0.2.2001

symantecclient_securityMatch3.0.2.2002

symantecclient_securityMatch3.0.2.2011

symantecclient_securityMatch3.0.2.2021

symantecnorton_antivirusMatch9.0corporate

symantecnorton_antivirusMatch9.0.0.338corporate

symantecnorton_antivirusMatch9.0.1corporate

symantecnorton_antivirusMatch9.0.1.1.1000corporate

symantecnorton_antivirusMatch9.0.1.1000corporate

symantecnorton_antivirusMatch9.0.2corporate

symantecnorton_antivirusMatch9.0.2.1000corporate

symantecnorton_antivirusMatch9.0.3.1000corporate

symantecnorton_antivirusMatch9.0.4corporate

symantecnorton_antivirusMatch9.0.5corporate

symantecnorton_antivirusMatch9.0.5.1100corporate

symantecnorton_antivirusMatch10.0corporate

symantecnorton_antivirusMatch10.0.1.1000corporate

symantecnorton_antivirusMatch10.0.1.1007corporate

symantecnorton_antivirusMatch10.0.2.2000corporate

symantecnorton_antivirusMatch10.0.2.2001corporate

symantecnorton_antivirusMatch10.0.2.2002corporate

symantecnorton_antivirusMatch10.0.2.2010corporate

symantecnorton_antivirusMatch10.0.2.2011corporate

symantecnorton_antivirusMatch10.0.2.2020corporate

symantecnorton_antivirusMatch10.0.2.2021corporate

VendorProductVersionCPE
symantecclient_security2.0cpe:2.3:a:symantec:client_security:2.0:*:*:*:*:*:*:*
symantecclient_security3.0cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*
symantecclient_security3.0.1.1000cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*
symantecclient_security3.0.1.1007cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*
symantecclient_security3.0.1.1009cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*
symantecclient_security3.0.2cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*
symantecclient_security3.0.2.2000cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*
symantecclient_security3.0.2.2001cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*
symantecclient_security3.0.2.2002cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*
symantecclient_security3.0.2.2011cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	client_security	2.0	cpe:2.3:a:symantec:client_security:2.0:::::::*
symantec	client_security	3.0	cpe:2.3:a:symantec:client_security:3.0:::::::*
symantec	client_security	3.0.1.1000	cpe:2.3:a:symantec:client_security:3.0.1.1000:::::::*
symantec	client_security	3.0.1.1007	cpe:2.3:a:symantec:client_security:3.0.1.1007:::::::*
symantec	client_security	3.0.1.1009	cpe:2.3:a:symantec:client_security:3.0.1.1009:::::::*
symantec	client_security	3.0.2	cpe:2.3:a:symantec:client_security:3.0.2:::::::*
symantec	client_security	3.0.2.2000	cpe:2.3:a:symantec:client_security:3.0.2.2000:::::::*
symantec	client_security	3.0.2.2001	cpe:2.3:a:symantec:client_security:3.0.2.2001:::::::*
symantec	client_security	3.0.2.2002	cpe:2.3:a:symantec:client_security:3.0.2.2002:::::::*
symantec	client_security	3.0.2.2011	cpe:2.3:a:symantec:client_security:3.0.2.2011:::::::*

Rows per page:

1-10 of 321

References

osvdb.org/36115

secunia.com/advisories/26036

securityresponse.symantec.com/avcenter/security/Content/2007.07.11b.html

securitytracker.com/id?1018367

securitytracker.com/id?1018371

www.securityfocus.com/bid/24802

www.vupen.com/english/advisories/2007/2506

exchange.xforce.ibmcloud.com/vulnerabilities/35354

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:N/I:N/A:C

AI Score

6.5

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

Related for NVD:CVE-2007-3771

cvelist2 prion1 cve2 nvd1 symantec1 securityvulns2